Privacy

SARIF Viewer is an offline, single-user desktop tool. It makes no outbound network connections, contains no telemetry, analytics or trackers, and loads no third-party resources — Bootstrap, the icon font and the fonts are all served from the binary itself.

What is processed

• SARIF documents you import are held in memory only and are lost when the process exits. Nothing is written unless you explicitly use the Export menu.
• Exported files (and their checksum sidecars) are written only to the export directory you configure.
• The server binds 127.0.0.1 (loopback); no remote client can reach it.

Browser storage

The only browser storage used is a single localStorage key (sarif-theme) remembering your light/dark choice. No cookies are set.